Consumer Data Protection Act; personal data obtained from source other than the consumer.

Consumer Data Protection Act; personal dataobtained from source other than the consumer. Provides that ifa controller has obtained personal data about a consumer from a sourceother than the consumer, the controller may comply with such consumer'srequest to delete such personal data by opting the consumer out ofthe processing of such personal data for targeted advertising, sale,or profiling. The provisions of the bill become effective on January1, 2023.